Category
AI threat intelligence platforms: what they are and who makes them
open-core knowledge graph platforms, finished intelligence and research subscriptions, external exposure and criminal-underground monitoring, intelligence inside a security operations stack: Filigran, KELA, Sekoia through Group-IB.
Types of AI threat intelligence platforms
Open-core knowledge graph platforms
Filigran builds OpenCTI, an open-source graph for storing and sharing intelligence, and sells hosted and supported editions with an agent layer on top. EclecticIQ follows a similar graph-and-workflow model as a commercial product. Both suit teams that run their own intelligence program and want to control sources.
Finished intelligence and research subscriptions
Recorded Future, Flashpoint and Silobreaker sell large collections of sources, analyst-written reports and AI search over them. A buyer pays for coverage and curation more than for a tool to operate, and the subscription usually arrives with onboarding or managed services.
External exposure and criminal-underground monitoring
KELA and Group-IB watch for stolen credentials, ransomware leaks, brand abuse and fraud outside the company network. Both bundle intelligence with digital risk services, so a sales conversation covers a set of modules, not one product, and fraud or brand teams often join the buying group.
Intelligence inside a security operations stack
Anomali and Sekoia combine intelligence with detection and response agents, which suits a team that wants fewer separate consoles and has a SOC to run them. Pulsedive sits at the other end, with a lightweight indicator lookup tool and a published monthly price for individuals who research alone.
Facts at a glance
| Tool | Publisher | Based in | Access |
|---|---|---|---|
| Filigran | Filigran | France | Free tier + API |
| KELA | KELA | Israel | Trial + API |
| Sekoia | Sekoia.io SAS | France | Paid + API |
| Anomali | Anomali, Inc. | United States | Paid + API |
| Recorded Future | Recorded Future, Inc. | United States | Paid + API |
| Silobreaker | Silobreaker | United Kingdom | Paid + API |
| EclecticIQ | EclecticIQ B.V. | Netherlands | Paid + API |
| Pulsedive | Pulsedive LLC | United States | Free tier + API |
| Flashpoint | EJ2 Communications, Inc. (Flashpoint) | United States | Paid + API |
| Group-IB | GROUP-IB GLOBAL PRIVATE LIMITED | Singapore | Paid + API |
